Ok, this is neat. Any account can publish verification records, and the Bluesky Trusted Verifiers are just the ones preloaded in the official client. Similarly to how moderation works with labelers.
Reposted from
Why
You're taking public marketing speak a bit too literally. Anyone can publish a verification record, its just our app chooses to display them just from a specific set of accounts for now.
Comments
CAs could kinda issue a cert for your site unilaterally, but they can't install it on your server. This is a force for centralization.
OTOH, any account can verify you and any client can consume that verification.